CVE-2022-33896
published 2022-10-07CVE-2022-33896: A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed…
PriorityP277high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
ITWVulnCheck KEV
Exploited in the wild
EPSS
0.50%
39.0th percentile
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hancom | hancom_office_2020 | — | — |
| hancom | hancom_office_2020 | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
vulncheck7.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9w8p-gv6j-vj3w: A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11
ghsa_unreviewed·2022-10-07
CVE-2022-33896 [HIGH] CWE-124 GHSA-9w8p-gv6j-vj3w: A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.
VulnCheck
hancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')
vulncheck·2022·CVSS 7.8
CVE-2022-33896 [HIGH] hancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')
hancom hancom_office_2020 Buffer Underwrite ('Buffer Underflow')
A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memory corruption by using memory before buffer start, which can lead to code execution. A victim would need to access a malicious file to trigger this vulnerability.
Affected: hancom hancom_office_2020
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://www.38north.org/2025/10/hwp-as-an-attack-surface-what-hancoms-hangul-word-processor-means-for-south-koreas-cyber-posture-as-a-us-ally/
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-07
Published
Exploited in the wild